Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa
File: 18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa (raw, json)
Hash identifier: NYqX/0zdZm0wGc5vpdMB+FlMVdE7yEP2HF7jVP5j4Oo=
Subject key identifier: 37:55:5F:EF:C3:45:A0:F0:12:F6:B5:2C:0A:CB:AB:24:12:4B:22:8B
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285849631EC4F982BB1E525E2B7AE0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa
Signing time: Wed 02 Apr 2025 01:00:46 +0000
ROA not before: Wed 02 Apr 2025 01:00:46 +0000
ROA not after: Tue 01 Jul 2025 01:00:46 +0000
asID: 203
IP address blocks: 20.137.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:63:1e:c4:f9:82:bb:1e:52:5e:2b:7a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Apr 2 01:00:46 2025 GMT
Not After : Jul 1 01:00:46 2025 GMT
Subject: CN=a4ce72a7-1d82-4eab-ad17-a7fc432012cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:cb:2a:45:ff:09:8f:c6:5d:99:15:7c:64:
b3:98:02:48:4e:fa:48:89:b9:48:4f:78:27:92:59:
ba:85:8d:82:06:06:e4:89:23:2b:57:b9:0b:31:d2:
f9:4a:ef:0e:3f:46:0d:14:76:c1:93:f7:7b:de:f4:
b4:32:f3:f0:78:57:d9:43:11:9d:74:e8:b6:b1:1a:
f4:74:e3:e3:94:27:17:23:34:92:4d:57:b9:96:a0:
29:12:85:cf:e2:ca:cf:a1:ba:ff:8e:8c:7d:a0:21:
17:0f:58:b5:8f:c5:e8:37:33:f1:6c:39:0b:d9:59:
1e:9f:54:db:34:b6:8f:d6:d3:43:31:c9:0a:32:8c:
73:be:d1:54:90:ef:21:01:e5:29:52:11:6e:42:04:
42:46:95:32:50:b3:f3:21:d5:0f:38:56:d1:84:90:
aa:b0:65:11:2b:54:ba:86:36:81:f7:76:a2:75:22:
6d:0f:4e:69:2c:b2:4d:de:ae:95:0a:59:83:5f:3b:
03:bd:ec:6c:15:9e:23:69:f6:49:b5:15:d4:6c:ce:
40:96:3e:b8:4b:0a:5d:cf:10:db:b4:31:52:43:52:
b8:e7:a9:f0:b2:f9:99:e9:5e:ec:e4:72:bf:63:41:
4c:d6:33:d3:d2:e2:9a:7e:5e:2b:5f:9d:de:82:61:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:5F:EF:C3:45:A0:F0:12:F6:B5:2C:0A:CB:AB:24:12:4B:22:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/18048b3d-9891-37fd-9b3e-a97cffc86aa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:a0:fa:30:99:ab:d8:9b:2b:b9:7f:23:e9:fa:6d:f2:aa:50:
5f:68:2f:4d:8b:4f:d6:b0:a2:01:fd:79:bb:5b:f8:57:d2:e0:
16:81:1e:c7:8a:a8:99:cb:ad:83:6a:53:9c:6b:11:60:98:ec:
15:5f:71:70:58:43:9f:1b:6d:aa:17:c8:a2:dd:27:1a:5e:a4:
b9:d1:3e:9d:77:90:21:26:6c:5b:8b:01:f6:27:8c:48:c4:f4:
26:72:d4:68:bf:1b:c9:b7:1d:dd:2b:0a:e4:6b:9b:e1:aa:e6:
7e:de:1e:d6:12:a5:05:2d:e3:dc:0e:47:b6:31:34:63:58:bd:
2e:a0:52:b6:9b:30:d7:a4:c7:af:20:06:cd:82:b0:c7:8d:82:
fa:62:4b:b5:68:35:5e:52:e7:4f:c5:a5:ed:3e:27:30:85:06:
00:c8:5f:70:5c:07:a5:ba:bb:45:61:ef:8b:20:39:3b:ee:85:
a3:c5:a6:10:5d:73:ec:05:db:c3:ee:c3:43:b2:1a:b1:5e:14:
b4:d1:1f:ba:08:3f:89:a6:8e:63:b5:eb:61:08:c3:1a:06:31:
5f:62:f4:61:ef:47:9b:a7:0f:dd:2c:c9:fc:b2:5a:5f:fe:49:
3e:e3:de:f2:14:b5:1f:21:6a:20:76:19:24:b5:1d:2d:be:2b:
63:d0:73:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHsT5grseUl4reuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk
YTRjZTcyYTctMWQ4Mi00ZWFiLWFkMTctYTdmYzQzMjAxMmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohDLKkX/CY/GXZkVfGSzmAJITvpIiblIT3gn
klm6hY2CBgbkiSMrV7kLMdL5Su8OP0YNFHbBk/d73vS0MvPweFfZQxGddOi2sRr0
dOPjlCcXIzSSTVe5lqApEoXP4srPobr/jox9oCEXD1i1j8XoNzPxbDkL2Vken1Tb
NLaP1tNDMckKMoxzvtFUkO8hAeUpUhFuQgRCRpUyULPzIdUPOFbRhJCqsGURK1S6
hjaB93aidSJtD05pLLJN3q6VClmDXzsDvexsFZ4jafZJtRXUbM5Alj64SwpdzxDb
tDFSQ1K456nwsvmZ6V7s5HK/Y0FM1jPT0uKafl4rX53egmEFuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdVX+/DRaDwEva1LArLqyQSSyKLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMTgwNDhiM2QtOTg5MS0z
N2ZkLTliM2UtYTk3Y2ZmYzg2YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHag+jCZq9ibK7l/I+n6bfKqUF9oL02LT9awogH9ebtb+FfS4BaBHseK
qJnLrYNqU5xrEWCY7BVfcXBYQ58bbaoXyKLdJxpepLnRPp13kCEmbFuLAfYnjEjE
9CZy1Gi/G8m3Hd0rCuRrm+Gq5n7eHtYSpQUt49wOR7YxNGNYvS6gUrabMNekx68g
Bs2CsMeNgvpiS7VoNV5S50/Fpe0+JzCFBgDIX3BcB6W6u0Vh74sgOTvuhaPFphBd
c+wF28Puw0OyGrFeFLTRH7oIP4mmjmO162EIwxoGMV9i9GHvR5unD90syfyyWl/+
ST7j3vIUtR8haiB2GSS1HS2+K2PQc48=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:30 2025 by rpki-client on console.sobornost.net